mirror of
https://github.com/Studio-Saelix/sencho.git
synced 2026-07-26 11:49:16 +00:00
fcff8e9047
* fix(monitor): collapse repeated host-metric alerts into per-window summary (F-11) A host metric over threshold previously dispatched one notification every 5 minutes for the duration of the breach, producing 7+ identical messages in 35 minutes and spamming Discord/Slack routes. Replace the hardcoded 5-minute cooldown for CPU/RAM/disk with a per-metric suppression window (default 60 min, configurable via host_alert_suppression_mins). The first breach fires immediately; subsequent cycles within the window are silently counted; the next dispatch after the window elapses carries a summary suffix listing how many cycles were suppressed and when the breach first crossed threshold. Recovery clears the counter so re-breach fires fresh. The pattern mirrors PolicyEnforcement.notifyTrivyMissingOnce: module-scope Map, in-memory only, in-cycle dedup, with a test-reset helper. The existing system_state row keeps post-restart re-fires bounded. Janitor and per-stack alert rules are unchanged; they already have adequate cadence and per-rule cooldown respectively. * fix(ci): restore backend and frontend checks * fix(e2e): remove create button timing race * fix(e2e): harden create double-click test * fix(monitor): clear persisted F-11 timestamp on recovery + clamp suppression window Independent audit on the previous commit surfaced two issues. 1. clearHostMetricSuppression early-returned on missing in-memory state, leaving a stale system_state.last_host_*_alert_ts row alive after a process restart. Scenario: breach fires + persists timestamp, process restarts, metric recovers before another evaluate cycle re-seeds the in-memory Map, recovery cleanup early-returns. Next re-breach inside the original window hits the restart-survivability branch and is silently suppressed instead of firing fresh. Fix: read persisted state in clearHostMetricSuppression and reset to '0' independently of in-memory presence. The read-before-write also skips redundant writes when the row is already cleared. 2. host_alert_suppression_mins is validated by zod on the bulk PATCH path but the single-key POST /api/settings path accepts allowlisted keys without re-validation. A 999999999-minute value would silence host alerts for centuries. Add MAX_HOST_ALERT_SUPPRESSION_MIN = 1440 mirroring the zod max, and clamp via Math.min in evaluateGlobalSettings. Two new vitest cases (restart-then-recovery-then-rebreach; the 1440 clamp) confirmed failing before the fix, passing after. The existing "metric drop" case updated to use a mock-backed persistence pattern consistent with the new restart-scenario tests. 73/73 monitor-service tests green; full backend suite 2507/2510 (same pre-existing Windows EBUSY flake on filesystem-backup.test.ts as baseline).
146 lines
5.8 KiB
TypeScript
146 lines
5.8 KiB
TypeScript
/**
|
|
* Stack management E2E tests - happy path CRUD.
|
|
*/
|
|
import { test, expect } from '@playwright/test';
|
|
import { loginAs, waitForStacksLoaded } from './helpers';
|
|
|
|
const TEST_STACK = 'e2e-test-stack';
|
|
|
|
/** Delete the test stack via the browser's authenticated fetch (so cookies are included). */
|
|
async function deleteTestStackViaApi(page: import('@playwright/test').Page) {
|
|
await page.evaluate(async (name) => {
|
|
await fetch(`/api/stacks/${name}`, { method: 'DELETE', credentials: 'include' }).catch(() => { });
|
|
}, TEST_STACK);
|
|
}
|
|
|
|
test.describe('Stack management', () => {
|
|
test.beforeEach(async ({ page }) => {
|
|
await loginAs(page);
|
|
await waitForStacksLoaded(page);
|
|
});
|
|
|
|
test('create a new stack', async ({ page }) => {
|
|
// Remove leftover from prior runs (using browser context auth)
|
|
await deleteTestStackViaApi(page);
|
|
await page.waitForTimeout(500);
|
|
|
|
// Reload to get a fresh sidebar without the deleted stack
|
|
await page.reload();
|
|
await loginAs(page); // may re-login if cookie expired, otherwise skips to dashboard
|
|
await waitForStacksLoaded(page);
|
|
|
|
await page.getByRole('button', { name: 'Create Stack' }).click();
|
|
await expect(page.getByRole('dialog')).toBeVisible({ timeout: 5_000 });
|
|
|
|
await page.locator('#create-stack-name').fill(TEST_STACK);
|
|
await page.locator('[role="dialog"]').getByRole('button', { name: 'Create' }).click();
|
|
|
|
// F-2: the dialog MUST close on a successful create. No silent .catch swallow.
|
|
await expect(page.getByRole('dialog')).toBeHidden({ timeout: 8_000 });
|
|
|
|
// F-2: a success toast MUST appear so the click does not feel like a no-op.
|
|
await expect(page.getByText(`Stack "${TEST_STACK}" created.`)).toBeVisible({ timeout: 5_000 });
|
|
|
|
// F-2: the new stack appears in the sidebar without a manual reload.
|
|
await expect(
|
|
page.locator('[role="listbox"]').getByText(TEST_STACK, { exact: true })
|
|
).toBeVisible({ timeout: 5_000 });
|
|
});
|
|
|
|
test('create dialog: double-clicking Create fires only one POST', async ({ page }) => {
|
|
const stackName = 'e2e-double-click-stack';
|
|
|
|
// Clean any prior leftover and reload so we start from a known sidebar state.
|
|
await page.evaluate(async (name) => {
|
|
await fetch(`/api/stacks/${name}`, { method: 'DELETE', credentials: 'include' }).catch(() => { });
|
|
}, stackName);
|
|
await page.reload();
|
|
await loginAs(page);
|
|
await waitForStacksLoaded(page);
|
|
|
|
let postCount = 0;
|
|
let releaseCreate: () => void = () => undefined;
|
|
let markFirstPostSeen: () => void = () => undefined;
|
|
let releasedCreate = false;
|
|
const createMayContinue = new Promise<void>((resolve) => {
|
|
releaseCreate = () => {
|
|
if (releasedCreate) return;
|
|
releasedCreate = true;
|
|
resolve();
|
|
};
|
|
});
|
|
const firstPostSeen = new Promise<void>((resolve) => {
|
|
markFirstPostSeen = resolve;
|
|
});
|
|
|
|
// Count POST /api/stacks calls and hold the first response until after a
|
|
// second click has been attempted. Continuing the original route after an
|
|
// assertion failure can race Playwright cleanup, so fetch and fulfill it
|
|
// explicitly once the test is ready to let the request complete.
|
|
await page.route('**/api/stacks', async (route) => {
|
|
if (route.request().method() === 'POST') {
|
|
postCount += 1;
|
|
markFirstPostSeen();
|
|
await createMayContinue;
|
|
const response = await route.fetch();
|
|
await route.fulfill({ response });
|
|
return;
|
|
}
|
|
await route.fallback();
|
|
});
|
|
|
|
try {
|
|
await page.getByRole('button', { name: 'Create Stack' }).click();
|
|
await expect(page.getByRole('dialog')).toBeVisible({ timeout: 5_000 });
|
|
await page.locator('#create-stack-name').fill(stackName);
|
|
|
|
const createBtn = page.locator('[role="dialog"]').getByRole('button', { name: /^Create/ });
|
|
await createBtn.click();
|
|
await firstPostSeen;
|
|
|
|
// Best-effort second click while the first POST is still in flight. A
|
|
// real user mash translates to a no-op once the button disables; the
|
|
// synchronous ref guard catches it even if Playwright manages to dispatch
|
|
// the click before React commits the disabled state.
|
|
await createBtn.click({ force: true, timeout: 500 }).catch(() => undefined);
|
|
await page.waitForTimeout(100);
|
|
expect(postCount).toBe(1);
|
|
|
|
releaseCreate();
|
|
await expect(page.getByRole('dialog')).toBeHidden({ timeout: 8_000 });
|
|
await expect(page.getByText(`Stack "${stackName}" created.`)).toBeVisible({ timeout: 5_000 });
|
|
} finally {
|
|
releaseCreate();
|
|
await page.unroute('**/api/stacks');
|
|
// Cleanup
|
|
await page.evaluate(async (name) => {
|
|
await fetch(`/api/stacks/${name}`, { method: 'DELETE', credentials: 'include' }).catch(() => { });
|
|
}, stackName);
|
|
}
|
|
});
|
|
|
|
test('delete the test stack', async ({ page }) => {
|
|
// Confirm the stack exists in the sidebar
|
|
await expect(page.getByText(TEST_STACK).first()).toBeVisible({ timeout: 5_000 });
|
|
|
|
// Click on the stack to open the editor
|
|
await page.getByText(TEST_STACK).first().click();
|
|
|
|
// Destructive actions live under the overflow menu in the stack toolbar
|
|
await page.getByRole('button', { name: 'More actions' }).click();
|
|
const deleteItem = page.getByRole('menuitem', { name: /delete/i });
|
|
await expect(deleteItem).toBeVisible({ timeout: 10_000 });
|
|
await deleteItem.click();
|
|
|
|
// AlertDialog confirmation
|
|
await expect(page.getByRole('alertdialog')).toBeVisible({ timeout: 5_000 });
|
|
await page.getByRole('alertdialog').getByRole('button', { name: 'Delete' }).click();
|
|
|
|
// Stack should no longer appear in the sidebar (exact match to avoid false positives from
|
|
// similarly-named stacks; scoped to the CommandList)
|
|
await expect(
|
|
page.locator('[role="listbox"]').getByText(TEST_STACK, { exact: true })
|
|
).not.toBeVisible({ timeout: 8_000 });
|
|
});
|
|
});
|